From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1Ju6Pg-0004hN-Dq for garchives@archives.gentoo.org; Thu, 08 May 2008 13:44:00 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 1D007E054F; Thu, 8 May 2008 13:43:59 +0000 (UTC) Received: from nameserver1.mcve.com (nameserver1.mcve.com [216.155.111.1]) by pigeon.gentoo.org (Postfix) with ESMTP id F35DBE054F for ; Thu, 8 May 2008 13:43:58 +0000 (UTC) Received: from [192.168.1.55] (shop.monetra.com [216.155.111.10]) by nameserver1.mcve.com (Postfix) with ESMTP id 7904511100EA for ; Thu, 8 May 2008 09:43:58 -0400 (EDT) Message-ID: <4823039E.4020008@gentoo.org> Date: Thu, 08 May 2008 09:43:58 -0400 From: Doug Goldstein User-Agent: Thunderbird 2.0.0.14 (X11/20080502) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 To: gentoo-dev@lists.gentoo.org Subject: Re: [gentoo-dev] Re: RFC: lzma tarball usage References: <1210166592.19574.10.camel@localhost> <20080507185239.541383c9@halo.dirtyepic.sk.ca> <4822FD54.4000904@gentoo.org> <20080508142844.0c5af157@snowcone> <482300F2.9030403@gentoo.org> <20080508143606.67bcfe6e@snowcone> In-Reply-To: <20080508143606.67bcfe6e@snowcone> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Archives-Salt: 5065b442-2c68-4958-9ef2-2a3f6e4f8089 X-Archives-Hash: 94242efed41b39ece9a0a4097af5debf Ciaran McCreesh wrote: > On Thu, 08 May 2008 09:32:34 -0400 > Doug Goldstein wrote: > >> Ciaran McCreesh wrote: >> >>> On Thu, 08 May 2008 09:17:08 -0400 >>> Doug Goldstein wrote: >>> >>>> It's troubling to me that projects are using lzma when it's on disk >>>> format isn't even final and the project has security issues. >>>> >>> You mean projects like 'GNU tar'? >>> >>> >> As far as I know Ciaran, all GNU projects have switched or are in the >> process of switching to lzma over bzip2. I believe the issue in >> question which prompted this original e-mail was due to coreutils. >> But I could be wrong. >> > > You miss my point. GNU tar sometimes changes its on disk format (and > will be doing so again at some point for xattrs), and it's had security > issues. > > Fair enough. However, newer GNU tar's are able to untar the older formats. If you read the lzma changelogs, it appears to imply that newer ones won't be able to read older formats. The changelog specifically states if a user they are handling the issue "gracefully" by telling the user to upgrade or downgrade their lzma. -- gentoo-dev@lists.gentoo.org mailing list